What’s Vulnerable › Products

ParisNeo lollms-webui vulnerabilities

46 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your ParisNeo lollms-webui version is affected

Latest ParisNeo lollms-webui vulnerabilities

• CVE-2026-33340 — LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint (CVSS 9.1)
• CVE-2025-1451 — Insufficient Patch Leading to DoS in parisneo/lollms-webui (CVSS 7.5)
• CVE-2024-9920 — Unrestricted File Upload and Execution in parisneo/lollms-webui (CVSS 8.8)
• CVE-2024-9919 — Missing Authentication Check in parisneo/lollms-webui (CVSS 8.4)
• CVE-2024-8898 — Path Traversal in parisneo/lollms-webui (CVSS 9.8)
• CVE-2024-8736 — Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui (CVSS 6.5)
• CVE-2024-8581 — Path Traversal in parisneo/lollms-webui (CVSS 9.1)
• CVE-2024-7058 — Relative Path Traversal in parisneo/lollms-webui (CVSS 4.4)
• CVE-2024-6986 — Cross-site Scripting (XSS) in parisneo/lollms-webui (CVSS 5.4)
• CVE-2024-12766 — SSRF in parisneo/lollms-webui (CVSS 7.5)
• CVE-2024-10047 — Directory Listing Vulnerability in parisneo/lollms-webui (CVSS 5.3)
• CVE-2024-10019 — Path Traversal and OS Command Injection in parisneo/lollms-webui (CVSS 6.7)
• CVE-2024-6674 — Data Leak through CORS Misconfiguration in parisneo/lollms-webui (CVSS 7.1)
• CVE-2024-6673 — CSRF Vulnerability in parisneo/lollms-webui (CVSS 6.5)
• CVE-2024-6959 — Denial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webui (CVSS 7.1)
• CVE-2024-6394 — Local File Inclusion in parisneo/lollms-webui (CVSS 7.5)
• CVE-2024-6040 — Missing client_id in parisneo/lollms-webui (CVSS 8.8)
• CVE-2024-4897 — Remote Code Execution in parisneo/lollms-webui (CVSS 8.4)
• CVE-2024-6250 — Absolute Path Traversal in parisneo/lollms-webui (CVSS 7.5)
• CVE-2024-5933 — Cross-site Scripting (XSS) in parisneo/lollms-webui (CVSS 5.4)
• CVE-2024-4498 — Path Traversal and RFI Vulnerability in parisneo/lollms-webui (CVSS 7.7)
• CVE-2024-4320 — Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui (CVSS 9.8)
• CVE-2024-3322 — Path Traversal in parisneo/lollms-webui (CVSS 9.8)
• CVE-2024-2624 — Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui (CVSS 9.8)
• CVE-2024-2548 — Path Traversal in parisneo/lollms-webui (CVSS 7.5)